Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C1OQQG_c6s8HUoEX1dfq0UYXtLY.cer
File:                     C1OQQG_c6s8HUoEX1dfq0UYXtLY.cer (raw, json)
Hash identifier:          e1MOOgrc4nAj11pc8OUK8VoSEfp7Sk5MRcBv25b2gFY=
Subject key identifier:   0B:53:90:40:6F:DC:EA:CF:07:52:81:17:D5:D7:EA:D1:46:17:B4:B6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer:       /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial:       5837
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A914B1DB/09BBF236415D11EFA316BB39C4F9AE02/C1OQQG_c6s8HUoEX1dfq0UYXtLY.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A914B1DB/09BBF236415D11EFA316BB39C4F9AE02/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 15 Jul 2024 07:48:39 +0000
Certificate not after:    Tue 30 Sep 2025 00:00:00 +0000
Subordinate resources:    IP: 160.22.88.0/23

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 00:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22583 (0x5837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
        Validity
            Not Before: Jul 15 07:48:39 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=A914B1DB/serialNumber=0B5390406FDCEACF07528117D5D7EAD14617B4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:48:91:7b:ed:7f:59:56:c5:26:98:8a:94:
                    0b:00:1a:58:7b:14:9f:a1:bb:d8:c6:a8:b5:f8:89:
                    c8:a3:d2:7d:43:06:3d:90:6b:11:38:89:92:73:87:
                    48:bf:ed:2c:4f:8b:9e:9b:46:40:dd:70:58:a4:7f:
                    19:4b:15:86:70:48:40:08:af:0d:2a:aa:e9:92:a4:
                    33:32:a8:93:04:65:87:a0:2e:82:20:d0:c8:cd:ba:
                    53:44:7b:55:ce:94:f7:96:c7:cf:2d:40:05:f5:73:
                    19:a9:24:30:a9:9d:8c:11:ae:23:95:a6:f7:d2:ff:
                    8f:13:b0:4c:1e:5a:c1:44:a8:7c:4c:39:f1:1a:01:
                    1d:c5:78:5b:c7:ea:da:e0:13:44:14:4f:ca:31:f6:
                    68:55:38:88:1c:1d:22:a7:0f:92:54:58:7b:6c:2e:
                    4a:92:68:f2:29:5f:ba:d0:5b:40:fd:7a:1a:25:f4:
                    f8:21:da:49:c3:bd:ab:71:55:37:02:fb:a9:e2:72:
                    1a:7d:48:17:45:cd:e7:3c:a0:cb:af:f6:0f:28:a4:
                    a7:47:29:b2:a2:9e:4f:2f:10:62:c3:76:19:1f:c9:
                    82:00:47:65:74:5c:cb:ae:23:3b:f7:87:3e:cd:35:
                    08:a3:26:4d:d9:9b:e6:10:e8:fe:10:83:50:95:39:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:90:40:6F:DC:EA:CF:07:52:81:17:D5:D7:EA:D1:46:17:B4:B6
            X509v3 Authority Key Identifier:
                keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/09BBF236415D11EFA316BB39C4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/09BBF236415D11EFA316BB39C4F9AE02/C1OQQG_c6s8HUoEX1dfq0UYXtLY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:de:33:92:93:36:ca:17:fa:5f:a2:f9:2b:f6:72:b2:a3:7e:
         aa:25:14:45:49:31:2a:c1:dc:53:4d:90:01:75:ad:33:d9:0e:
         56:d2:48:74:18:3c:e3:3e:4e:50:10:eb:ba:8c:4b:46:68:06:
         b5:af:72:48:2a:d1:c7:06:81:57:6d:fc:fe:d7:29:04:6f:10:
         aa:41:4e:09:44:49:89:06:c5:fb:55:ef:48:ff:4c:25:fd:e1:
         5e:6f:a4:3f:ce:61:85:48:b6:c2:27:2a:b4:02:3c:ff:2d:ec:
         29:2c:1b:5c:14:09:86:56:bc:bd:e2:ac:6b:bc:71:16:d3:16:
         e9:e5:a5:3e:b6:ca:6e:63:a7:1f:05:94:d6:51:f1:c1:93:e6:
         a2:42:e5:11:68:28:99:5b:aa:ab:14:75:50:c4:83:67:e8:10:
         d0:18:aa:fa:db:51:29:43:2d:e1:53:f5:29:12:6f:c0:3e:7e:
         ff:e3:b4:24:0b:c2:56:f2:19:ad:c4:cd:71:57:e7:54:06:d7:
         9a:e1:2e:d8:70:3d:54:47:16:cf:1e:02:ee:91:9a:37:b1:31:
         fd:32:87:29:10:19:b6:82:2b:1f:db:42:65:f1:e6:62:84:23:
         09:db:29:e8:a1:fd:ab:93:82:15:f5:99:22:84:5b:cc:bd:e1:
         30:9c:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----